$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1686602F57C97BDB7058DB5F05623F79F733F08.cer File: C1686602F57C97BDB7058DB5F05623F79F733F08.cer (raw, json) Hash identifier: cx33JFn924fdfK5KuqUW0Refk6ODqDvYQPyOP/AmOzU= Subject key identifier: C1:68:66:02:F5:7C:97:BD:B7:05:8D:B5:F0:56:23:F7:9F:73:3F:08 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 2369261A21849530EA8B458165EC25EA350F89B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1106871076220108819/0/C1686602F57C97BDB7058DB5F05623F79F733F08.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1106871076220108819/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Wed 13 May 2026 09:11:50 +0000 Certificate not after: Wed 12 May 2027 09:16:50 +0000 Subordinate resources: AS: 63620 IP: 59.153.116.0/22 IP: 103.70.220.0/22 IP: 2406:3d80::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:69:26:1a:21:84:95:30:ea:8b:45:81:65:ec:25:ea:35:0f:89:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 13 09:11:50 2026 GMT Not After : May 12 09:16:50 2027 GMT Subject: CN=C1686602F57C97BDB7058DB5F05623F79F733F08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3f:a6:f7:f6:14:d1:f6:8b:2b:8c:83:a7:2c: 73:86:71:09:5a:9b:d1:f0:9d:5a:7e:f0:4e:56:6e: 8a:d9:b7:4c:a5:91:5c:ca:81:8f:44:cb:a2:05:ae: 77:c0:a7:87:96:62:ad:b8:a0:f7:82:67:67:0d:78: d3:54:e3:69:dd:d5:2e:c1:6b:d9:17:07:f6:a6:ee: fd:4f:54:0e:2b:8b:69:bd:d4:97:39:af:88:60:06: 1f:5c:a5:2f:12:02:21:fb:92:b6:63:23:0f:b0:d1: d5:8f:3f:b6:94:83:0a:36:c2:55:5c:72:62:ae:4a: e0:40:d7:0e:14:56:f7:a7:6d:5a:66:f6:2b:8d:a3: d2:a9:56:d9:d9:0d:dd:4f:51:8e:1f:a9:63:ae:a9: ae:0f:e8:6a:c8:0e:8e:7a:2a:10:84:cf:65:ca:57: fd:60:7f:72:a1:c1:14:27:f0:fd:3a:f5:18:58:92: 7a:9a:e3:21:b5:42:cc:31:b9:4d:ba:e4:fe:39:9f: e1:97:ec:a7:32:27:00:69:f2:95:a9:68:b6:9f:2a: ec:f0:ee:91:01:a6:da:ae:ce:a0:54:a9:cc:d8:66: ef:b3:8f:ae:b2:fd:f0:45:4f:3e:75:09:28:6e:a9: 54:06:3e:d4:5b:84:08:2c:7e:e4:f9:15:c4:6d:ab: 25:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C1:68:66:02:F5:7C:97:BD:B7:05:8D:B5:F0:56:23:F7:9F:73:3F:08 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1106871076220108819/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1106871076220108819/0/C1686602F57C97BDB7058DB5F05623F79F733F08.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 59.153.116.0/22 103.70.220.0/22 IPv6: 2406:3d80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63620 Signature Algorithm: sha256WithRSAEncryption 55:84:ef:97:a4:26:5c:27:1f:8d:12:f7:da:00:d8:3e:57:98: 70:27:3b:9a:ec:c9:52:c7:dd:12:a0:a4:cf:4a:3e:83:e7:e4: 04:ee:09:d0:fe:2e:c9:e7:7e:0e:2e:59:25:ba:4b:95:ce:7b: 53:d8:0d:1c:e7:74:79:db:f7:ba:ce:d8:02:0a:5f:3f:47:29: 84:f5:c9:68:19:2b:0b:81:1d:ee:9a:1e:98:39:f2:51:1f:7c: 50:3e:aa:fc:76:e0:d5:e4:b5:2a:45:48:9b:11:e6:de:28:e9: b9:38:82:56:98:dc:26:b7:74:a7:e7:47:6b:9f:5d:98:bc:77: bd:f8:01:ef:a8:b1:e0:d4:c0:af:8b:97:72:ba:6a:dd:5a:03: 0f:28:61:27:f4:b6:9d:e0:a1:64:a8:66:bd:03:7d:71:a1:c4: f4:5a:76:b4:44:1b:4b:4d:00:17:e5:2f:8d:ea:63:75:09:53: 03:a6:4b:aa:32:81:d9:b6:f2:61:d9:7c:19:01:ba:c6:22:1c: 71:9f:26:08:a2:4c:01:6b:ec:82:c9:0b:90:92:6c:32:66:a4: c4:db:51:ef:a7:d4:3c:ca:09:05:83:44:c8:15:ba:b8:3a:a3: ad:38:53:7c:7e:0d:f7:b9:1a:62:06:a7:54:c9:10:e4:4e:36: a4:39:11:50 -----BEGIN CERTIFICATE----- MIIF2DCCBMCgAwIBAgIUI2kmGiGElTDqi0WBZewl6jUPibAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUxMzA5MTE1MFoX DTI3MDUxMjA5MTY1MFowMzExMC8GA1UEAxMoQzE2ODY2MDJGNTdDOTdCREI3MDU4 REI1RjA1NjIzRjc5RjczM0YwODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKM/pvf2FNH2iyuMg6csc4ZxCVqb0fCdWn7wTlZuitm3TKWRXMqBj0TLogWu d8Cnh5Zirbig94JnZw1401Tjad3VLsFr2RcH9qbu/U9UDiuLab3UlzmviGAGH1yl LxICIfuStmMjD7DR1Y8/tpSDCjbCVVxyYq5K4EDXDhRW96dtWmb2K42j0qlW2dkN 3U9Rjh+pY66prg/oasgOjnoqEITPZcpX/WB/cqHBFCfw/Tr1GFiSeprjIbVCzDG5 Tbrk/jmf4ZfspzInAGnylalotp8q7PDukQGm2q7OoFSpzNhm77OPrrL98EVPPnUJ KG6pVAY+1FuECCx+5PkVxG2rJaUCAwEAAaOCAsswggLHMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMFoZgL1fJe9twWNtfBWI/efcz8IMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEwNjg3MTA3NjIyMDEwODgxOS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA2ODcxMDc2MjIwMTA4ODE5 LzAvQzE2ODY2MDJGNTdDOTdCREI3MDU4REI1RjA1NjIzRjc5RjczM0YwOC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAI7mXQDBAJnRtwwDQQCAAIwBwMFACQGPYAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDAPiEMA0GCSqGSIb3DQEBCwUAA4IBAQBVhO+X pCZcJx+NEvfaANg+V5hwJzua7MlSx90SoKTPSj6D5+QE7gnQ/i7J534OLlklukuV zntT2A0c53R52/e6ztgCCl8/RymE9cloGSsLgR3umh6YOfJRH3xQPqr8duDV5LUq RUibEebeKOm5OIJWmNwmt3Sn50drn12YvHe9+AHvqLHg1MCvi5dyumrdWgMPKGEn 9Lad4KFkqGa9A31xocT0Wna0RBtLTQAX5S+N6mN1CVMDpkuqMoHZtvJh2XwZAbrG IhxxnyYIokwBa+yCyQuQkmwyZqTE21Hvp9Q8ygkFg0TIFbq4OqOtOFN8fg33uRpi BqdUyRDkTjakORFQ -----END CERTIFICATE-----Generated at Wed May 13 20:17:19 2026 by rpki-client